U.S. Department of Justice 



Federal Bureau of Investigation 

Washington , D.C. 20535 


August 12, 2011 


MR. JASON SMATHERS 

MUCKROCK 

#3 

185 BEACON STREET 
SOMERVILLE, MA 02143 


Subject: LANNI, JOSEPH TERRENCE 
FOlPANo. 1170435-000 


Dear Mr. Smathers: 


The enclosed documents were reviewed under the Freedom of Information/Privacy Acts (FOIPA), Title 5, 
United States Code, Section 552/552a. Deletions have been made to protect information which is exempt from disclosure, 
with the appropriate exemptions noted on the page next to the excision. In addition, a deleted page information sheet was 
inserted in the file to indicate where pages were withheld entirely. The exemptions used to withhold information are marked 
below and explained on the enclosed Form OPCA-16a: 

Section 552 


Section 552a 

□(b)(1) 

□(b)(7)(A) 

□(d)(5) 

□(b)(2) 

□(b)(7)(B) 

°(i)(2) 

8(b)(3) ~ , - - ■ - 

8(b)(7)(C) 

□(k)(1) 

Federal Rules of Criminal Procedure 

□(b)(7)(D) 

□(k)(2) 

Rule 6(e) 

8(b)(7)(E) 

□(k)(3) 


□(b)(7)(F) 

□<k)(4) 

□(b)(4) 

□(b)(8) 

□(k)(5) 

□(b)(5) 

□(b)(9) 

°(k)(6) 

8(b)(6) 


□(k)(7) 


42 page(s) were reviewed and 22 page(s) are being released. 

b Document(s) were located which originated with, or contained information concerning other 
Government agency(ies) [OGA]. This information has been: 

b referred to the OGA for review and direct response to you. 

□ referred to the OGA for consultation. The FBI will correspond with you regarding this 
information when the consultation is finished. 

b You have the right to appeal any denials in this release. Appeals should be directed in writing to the 
Director, Office of Information Policy, U.S. Department of Justice, 1425 New York Ave., NW, 

Suite 11050, Washington, D.C. 20530-0001 . Your appeal must be received by OIP within sixty (60) days 
from the date of this letter in order to be considered timely. The envelope and the letter should be clearly 
marked “Freedom of Information Appeal.” Please cite the FOIPA Number assigned to your 
request so that it may be easily identified. 

□ The enclosed material is from the main investigative file(s) in which the subject(s) of your request was 
the focus of the investigation. Our search located additional references, in files relating to other 
individuals, or matters, which may or may not be about your subject(s). Our experience has shown, 
when ident, references usually contain information similar to the information processed in the main file(s). 


Enclosure(s) 


Because of our significant backlog, we have given priority to processing only the main investigative file(s). 
If you want the references, you must submit a separate request for them in writing, and they will be 
reviewed at a later date, as time and resources permit. 

□ See additional information which follows. 


Sincerely yours, 


David M. Hardy 
Section Chief 
Record/Information 
Dissemination Section 
Records Management Division 


EXPLANATION OF EXEMPTIONS 


SUBSECTIONS OF TITLE 5, UNITED STATES CODE, SECTION 552 

(b)(1) (A) specifically authorized under criteria established by an Executive order to be kept secret in the interest of national defense or foreign 

policy and (B) are in fact properly classified to such Executive order; 

(b)(2) related solely to the internal personnel rules and practices of an agency; 

(b)(3) specifically exempted from disclosure by statute (other than section 552b of this title), provided that such statute(A) requires that the 
matters be withheld from the public in such a manner as to leave no discretion on issue, or (B) establishes particular criteria for 
withholding or refers to particular types of matters to be withheld; 

(b)(4) trade secrets and commercial or financial information obtained from a person and privileged or confidential; 

(b)(5) inter-agency or intra-agency memorandums or letters which would not be available by law to a party other than an agency in litigation 

with the agency; 

(b)(6) personnel and medical files and similar files the disclosure of which would constitute a clearly unwarranted invasion of personal privacy; 

(b)(7) records or information compiled for law enforcement purposes, but only to the extent that the production of such law enforcement 

records or information ( A ) could be reasonably be expected to interfere with enforcement proceedings, ( B ) would deprive a person 
of a right to a fair trial or an impartial adjudication, ( C ) could be reasonably expected to constitute an unwarranted invasion of personal 
privacy, ( D ) could reasonably be expected to disclose the identity of confidential source, including a State, local, or foreign agency or 
authority or any private institution which furnished information on a confidential basis, and, in the case of record or information compiled 
by a criminal law enforcement authority in the course of a criminal investigation, or by an agency conducting a lawful national security 
intelligence investigation, information furnished by a confidential source, ( E ) would disclose techniques and procedures for law 
enforcement investigations or prosecutions, or would disclose guidelines for law enforcement investigations or prosecutions if such 
disclosure could reasonably be expected to risk circumvention of the law, or ( F ) could reasonably be expected to endanger the life or 
physical safety of any individual; 

(b)(8) contained in or related to examination, operating, or condition reports prepared by, on behalf of, or for the use of an agency responsible for 
the regulation or supervision of financial institutions; or 

i b n 

(b)(9) geological and geophysical information and data, including maps, concerning wells. 

SUBSECTIONS OF TITLE 5, UNITED STATES CODE, SECTION 552a 

(d)(5) information compiled in reasonable anticipation of a civil action proceeding; 

(j) (2) material reporting investigative efforts pertaining to the enforcement of criminal law including efforts to prevent, control, or reduce 

crime or apprehend criminals; 

(k) (l ) information which is currently and properly classified pursuant to an Executive order in the interest of the national defense or foreign 

policy, for example, information involving intelligence sources or methods; 

(k)(2) investigatory material compiled for law enforcement purposes, other than criminal, which did not result in loss of a right, benefit or 

privilege under Federal programs, or which would identify a source who furnished information pursuant to a promise that his/her identity 
would be held in confidence; 

(k)(3) material maintained in connection with providing protective services to the President of the United States or any other individual pursuant 
to the authority of Title 1 8, United States Code, Section 3056; 

(k)(4) required by statute to be maintained and used solely as statistical records; 

(k)(5) investigatory material compiled solely for the purpose of determining suitability, eligibility, or qualifications for Federal civilian 
employment or for access to classified information, the disclosure of which would reveal the identity of the person who furnished 
information pursuant to a promise that his/her identity would be held in confidence; 

(k)(6) testing or examination material used to determine individual qualifications for appointment or promotion in Federal Government service the 
release of which would compromise the testing or examination process; 

(k)(7) material used to determine potential for promotion in the armed services, the disclosure of which would reveal the identity of the person 
who furnished the material pursuant to a promise that his/her identity would be held in confidence. 


FB1/DOJ 


FEDERAL BUREAU OF INVESTIGATION 
FOIPA 

DELETED PAGE INFORMATION SHEET 
Serial Description ~ Unrecorded Serial 


Total Deleted Page(s) - 8 
Page 14 ~ Referral/Direct 
Page 1 5 ~ Referral/Direct 
Page 16 ~ Referral/Direct 
Page 17 ~ Referral/Direct 
Page 26 ~ b6, b7C, b7E 
Page 27 - b6, b7C, b7E 
Page 28 - b6, b7C, b7E 
Page 29 - b6, b7C, b7E 


Toia 

Page 

t-'aci. 

Page . 
Pacf. 
Py ' 
Page 

***;• 


1 V * 

u u 

Pa.; 

Pi-V 

Part* 



xxxxxxxxxxxxxxxxxxxxxxxx 


X Deleted 


X No Duplicatfon^Fei 
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(Rev. 01-31-2003) 


FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE 


Date: 03/25/2007 


To: Las Vegas 


From: Las Vegas 


Squad 12 / Cyber 


Contact: 


Approved By: 



Drafted By: 


alk 


Case ID #: 288A-LV-40102 (Pending) 


b6 

b7C 




Title: UNSUB (S); 


J. TERRENCE LANNI - VICTIM; 
COMPUTER INTRUSION 


Synopsis: To request the creation of a subfile for the above 
captioned case. 

Details: It is requested that a subfile, FGJ, be created for the 
purpose of containing material directly referencing Federal Grand 
Jury 6(e) materials. 


♦♦ 


^2 ST/- LO- 
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FD-542 (Rev. 04-06-2007) 


FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 06/11/2007 

To : Las Vegas 


From: Las Vegas 

Squad 12 / Cyber 
Contact : | 


Approved By: 
Drafted By: 



Case ID #: 288A-LV-40102 (Pending) 

Title: UNSUB (s); 

J. TERRENCE LANNI - VICTIM; 
COMPUTER INTRUSION 



Synopsis: To report statistical accomplishment^ for the above 

captioned subject matter. ^ 

Details: It was 


b3 


E 


determined 


~was us ^a to open email accoun^ 

n -i n 4- Vir\ m i* r 


f- 3 The emai l^addre s s is the main account for 

thirteen >13) other email addresses containing the names of 


prominent bihs^ness persons 


O ne 2703(f) preservation lett er was issued to 
regarding I 


United States Postal Inspector £ 


X. 


the MGM ha&el and casino ' s security director [ 


November 20,\2006, to inform him of the mail forwarding 
Terrence J. L^pni is the CEO for the MGM Mirage. 


b6 

lfaxe£ 7c 

_] on 

quest . 



iy o/o> 




-3 


TO : 
Re: 


Las Vegas From: Las Vegas 

288A-LV-40102 , 06/11/2007 


Accomplishment Information: 


Number : 1 

Type: NIPCIP 2703(f) ORDER SERVED 

ITU: NIPCIP 

Claimed By: 

SSN: 

Name : 

Squad: squad 12 


Number : 1 

Type: NIPCIP FOREIGN SOURCE IP ADDRESS IDENTIFIED 

ITU: NIPCIP 

Claimed By^ 

SSN: 

Name : 

Squad: 


Squad 12 


Number : 1 

Type: NIPCIP VICTIM CONTACTED/ INTERVIEWED 

ITU: NIPCIP 

Claimed By: 

SSN: I 

Name : 

Squad : Squad 12 


b6 

b7C 


♦♦ 
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(Rev. 01-31-2003) 


FEDERAL BUREAU OF INVESTIGATION 


Precedence : ROUTINE 

To: Las Vegas 

From: 


Date: 05/21/2007 


Las Vegas 
Squad 12 
Contact: 


CVhpT- 


Approved By: 
Drafted By: 


: alk 


b 6 
b7C 


Case ID #: 288A-LV-40102 (Pending) 

Title: UNSUB (S); 

J. TERRENCE LANNI - VICTIM; 
COMPUTER INTRUSION 


Synopsis : 
closed. 


To request the above captioned subject matter be 


Details: On May 18, 2007, Special Aaen ^ ( SA J 

Assistant United States Attorney (USAO) 
detailed t~hp, nature of the case and the 
date 




met with 


SA 


information received to 
determined that it was not in the United States 


Attorney's Office (USAO) interest to proceed with the prosecution 
of the case due to lack of financial loss. 


On June 11, 2007, Unitqd States Postal Inspector 


was faxed a copy of \the email addresses received 

during the service of a grand i urv ^subpoena server on I ~1 

regarding email addres sl % ^ 

It is requested the above captioned subject matter, and 
all sub files be closed. ^ 



b3 

b6 

hlC 


♦♦ 
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(Rev. 01-31-2003) 


FEDERAL BUREAU OF INVESTIGATION 





Precedence: ROUTINE 


Date: 02/28/2007 

To : Las Vegas 

Attn: Squad 12 (Cyber) 

Cyber 

Attn: CIS, 

C3IU2 

SSA 



b6 

b7C 


Case ID #: 288A-LV-NEW (Pending) 

Title: UNSUB (s); 

J. TERRENCE LANNI - VICTIM 
COMPUTER INTRUSION 


From: Las Vegas Division 

Squad 12 / C vber 
Contact: SA 


Approved By: 
Drafted By: 




: alk 


Synopsis: To request the above captioned case be opened and 

assigned. 


Details: A walk-in complaint was received from 

Senior Vice President, Global Security, MGM MIRAGE, located at 
3260 Industrial Road, Bldg B. , Las Vegas, NV 89109. 


| provided information that J. Terrence Lanni, be 

Chairman and Chief Executive Officer of MGM MIRAGE, was a victim b7c 
of an unknown individual who somehow appropriated Lanni ' s name 
and social security number and utilized it in an attempt to 
process an official change of address form with the United States 
Postal Service. The change of address form had been sent via 
mail in an envelope with a typed label directed to 


CHANGE OF ADDRESS ORDER 
ATTN: CARRIER ROUTE # CO 07 . 
UNITED STATES POSTAL SERVICE. 
4975 SWENSON ST. 

LAS VEGAS, NV 89119-9998 •. 
U.S.A 



To: Las Vegas From: Las Vegas Division 

Re: 288A-LV-NEW, 02/28/2007 


ATHENS, 10210 

GREECE . 

Postage and markings on the envelope indicated it was mailed from 
Greece . 

Contained within the envelope was a request to 
officially change the business address of SILVER SAGE MINING & 
DRILLING CORP. from an old address of 6601 BERMUDA RD. LAS VEGAS, 
NV 89119-3605 to a new address of P.O. BOX 3191, ATHENS 10210. 
GREECE . The change of address request contained an e-mail 
address of admin®ssm-dc . com and stated the preparer 1 s name as 
TERRENCE J. LANNI . An e-mail address of t . lanni@ssm-dc . com 
followed Lanni 1 s name as it appeared on the form. Also appearing 
on the change of address form was a signature purportedly of 
Terrence J. Lanni and the true social security number for Lanni. 

A typed note of explanation sent along with the change 
of address form states as follows: 

"My name is TERRENCE J LANNI and I am the President of 
SILVER SAGE MINING & DRILLING CORP. We moved our company from USA 
to GREECE. I am currently in Greece and I would not visit the USA 
for the next 10 months. I need to submit a change of address for 
business. I did not submit the form while I was in the USA at 
the local Post office as I should had, because I was under the 
false impression that I could sumbit (sic) the application 
through the Internet from Greece or mail the PS FORM 3575 to you, 
from Greece . I have notarized my application by a Greek Notary 
public. Please notify me by mailing to me a welcome Kit to my 
new address in Greece." 


Postal Inspector, was contacted and 

advised that she had been notified regarding the fraudulent 
change of address form and had sent an e-mail to one of the e- 
mail addresses indicated on the change of address form and 
requested that Mr. Lanni contact her regarding the change of 
address . She provided her ti tle and contact information in the 
e-mail message she h ad sent. I I received a response 


bo 

b7C 


from 'f 
Miss 


r 


mail to : t . lanni@ssm-dc . com that stated "Dear 
I could not reach you by phone during 
business hours I am 10 hours ahead of you. Please explain to me 
by e-mail what is need ed to be done . I will comply as soon as 
possible. Thank you." I | responded via e-mail to 

I [mailto:admin@ssm-dc.com] stating that she needed 
to speak with Mr. Lanni regarding the change of address he filed. 
She again provided her contac.t information. No subsequent 
contact was made. 
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To: Las Vegas From: Las Vegas Division 

Re: 288A-LV-NEW, 02/28/2007 


Since this unknown subject utilized the Internet (e- 
mails indicate use of a computer used in interstate or foreign 
communication, i.e. "protected computer") with the apparent 
intent to defraud and obtain something of value {potentially a 
violation of 18 USC 1030 (a) (4)), it is requested that a new 

288A investigation be initiated and assigned to the writer. It 
is anticipated that this case will be worked jointly with the 
U.S. Postal Inspection Service. 


To: 

Re: 


Las Vegas From: Las Vegas Division 

288A-LV-NEW, 02/28/2007 


LEAD (s) : 

Set Lead Is (Info) 

CYBER 

AT CIS. C3IU2 
Read and clear. 

♦♦ 
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Case ID: 288A-LV-40102 


1A Envelope 







~^Ui£.4aes 


agMi Lv ' te/ox- //j 


i 


/ 



yr ~^r~<r * 


? « ii » U i KSinJi «J > > » tA » • 


-L. 


File Number 


2 M& - ^L^Lil 10Z. d±L 


Field Office Acquiring Evidence _ 
Serial # of Originating Document. 


1 if 


* * ; 



(Address) 

Z-^rs Vegc^ A N 


(City and State) 


-bo . 

b7C 


By 


S ± 


JZLno 


To Be Returned □ Yes 

Receipt Given □ Yes £3 No 

Grand Jury. Material - Disseminate Only Pursuant to Rule 6 (e) 
Federal Rules of Criminal Procedure 

□ Yes \/{ No 

Federal Taxpayer Information (FTI) , 

* □ Yes JZlNo 

Tit,c: • VneM; 

T €rr fat t L * 7/1/1 < ' 

■' • 


\ 


:/AIv 


1 

■ ft * 


(Communication Enclosing Material) 


Description: □ Original notes re interview of 


b6 

_b7C 


•P& rc.c ~Qi w> Us^ 







\ 


r&s v r 


■ s rr r^. 


i, * 

L 




' - — <!«S 


File Number 


2J£®/L^LM~ Ho\ oZ -IA 3 


L\l 


Field Office Acquiring Evidence 

Serial # of Originating Documents 

Date Received _ Q~2~ /■' <Z~e>7 

From 


&L 


(H 


i*e) 


V 

■i'T v. 


(Address) 


By 


S£l 


(City and State! 


To Be Returned □ Yes 
Receipt Given □ Yes 


yi No 
JZ5 No 

Grand Jury Material - Disseminate Only Pursuant to Rule 6 (e) 
Federal Rules of Criminal Procedure 

. □ Yes 

Federal Taxpayer Information (FTI) 

* □ Yes 


Title: 




No 

J/Tno 

TOvynti. i — i/kfan 

, CXf f 


_ _ % fo k 

Reference)/* *_ 


XP qJJs4& u/k> 


t 


ft 


. i 


(Communication Enclosing Material) 


Description: 


be 

bic 




□ Original notes re interview of 

cn/ le>7 Z&& ! 




* 

* 
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WHOIS- 88.218.62.177 


http://www.dnsstuff.com/tools/whois.ch?ip=88.2 1 8.62. 177 




Location : Greece [City: Athens, Attikil 


wr 


= 1 This is the RIPE Whois query server ill. 

I The objects are in RPSL format. 

•S 

■l Mote: the default output of the RIPE Whois server 
‘v is changed. Your tools may need to be adjusted. See 
$ http: //www. ripe. net/db/nevis/abuse-proposal-20050331.html 
% for more details. 

* 

I Rights restricted by copyright. 

% See http: //tow. ripe. net/db/copyright.html 

l Information related to '88.218.32.0 - 88.218.63.255’ 


;inetnum: 
netname: 
descr: 
country: 
‘admin-c: 
•admin-c: 
•tech-c: 
tech-c: 
istatus: 
jmnt-by : 
=mnt-by: 
mnt-by: 
mnt-domains : 
mnt-domains : 
changed: 
source: 


88.218.32.0 - 88.218.63. 255 
VIVODI-DSL-CUST0MERS-83-17 1-240 
IP addresses for DSL customers 
GR 

VSA100-RIPE 

VNM15-RIPS 

VNM15-RIPE 

VSAlOO-P.IPE 

ASSIGNED PA 

ASF-VIV 

V I VODI -SYSADMIN -MNT 
VIVODI-MHC-MNT 
VIVODI— SYSADMIN-MNT 
VIVODI -KMC-MNT 

"+*+++++ *+* Ovivodi.gr 20060124 
RIPE 


role : 
address: 

[phone : 

’fax-no: 

;e-mail: 
admin-c: 
j tech-c: 

,tech-c: 
nic-hdl: 
:mnt-by : 
source: 

.org: 

^notify: 

abuse-mailbox: 

changed: 


Vivodi System Administrators 

Dorigni 29-31 £ Elpidos 18, 10434 Athens, Greece 

+30-210-0893-700 

+30-210-0893-701 

+ * + < ■* * » * @ vivodi . gr 

GM5594-RIPE 

AAK100-RIPE 

KT590-RIPE 

VSA100-RIPE 

VIVODI -SYSADMIN-MNT 

RIPE 

ORG-VTS2-RIPE 

+♦* ** * i. * ** * «* 6vivodi.gr 

‘^'^Qvivodi.gr 

20050606 


role: 

address: 

tech-c: 

phone: 

fax- no: 

e-mail: 

org : 

.admin-c: 

[tech-c: 

;tech-c: 

\ tech-c: 

•nic-hdl: 

? notify: 

iabuse -mailbox: 

jmnt-by: 

imnt-by: 

: changed : 
changed: 
‘source: 


Vivodi Network Management Center 

Dorigni 29-31 & Elpidos 10, 10434 Athens, 

PK3308-RIPE 

+30-210-8893-721 

+30- 2 10- 8 B 93-701 

* * ** +■* "* * @ vivodi . gr 

ORG-VT52 -P.I PE 

KK2027-RIPE 

AP6047-RIPE 

MCN1978-RIPE 

GH1499-RIPE 

VMM15-RIPE 

v ★ * * ♦ 4 * * (jjvivodi . g r 

* *+ * *0 vivodi . gr 

ASF-VIV 

VIVODI -NMC-MNT 

4r*r+***@ v i vod i g r 20051116 
w + ***v* <avivodi.gr 20051128 
RIPE 


:§ Information related to * 88 . 218 . 48 . 0/20AS21284 ' 


Greece 


.route: 

'descr: 

'origin: 

ront-by : 

changed: 

source: 


88.218.48.0/20 

VIVODI-BL3-MS 

AS21284 

V I VOD t-NKC-MNT 

•*«+++* vivodi.gr 20060405 

RIPE 


1 


i 


iTThe following lines added by www.dnsstuff.com per requirement by RIPE] . . 

This service is subject to the terms and conditions stated in the RIPE NCC Database Copyright Notice . 
^Contact dnsstuff.com's ' info2Q ' address to report problems regarding Che functionality of the service. 


1 of 1 


2/20/2007 9:06 AN 


WHOIS - nbg-inc.com 

V 


http://www.dnsstuff.com/tools/whois.ch?ip= r nbg-inc.con] 


Registrar: 
Status : 
Dates: 

DNS Servers: 


MELBOURNE IT# LTD. D/B/A INTERNET NAMES WORLDWIDE 
clientTransferProhibited 

Created 24-sep-2006 Updated 17-oct-2006 Expires 24-sep-2007 
YNSl.YAHOO.COM YNS2.YAHOO.COM 


I was referred to whois.melbourneit.com; I'm looking it up there. 


I was referred to whois.melbourneit.com; I'm looking it up there. 


2007-09-25 


Domain Name nbg-inc.com 

Creation Date 2006-09-25 

Registration Date.... 2006-09-25 

Expiry Date 

Organisation Nome... 

Organisation Address 
Organisation Address 
Organisation Address 
Organisation Address 
Organisation Address. 
Organisation Address. 



NY 

UNITED STATES 


jAdmin Name 

■j Admin Address 

•| Admin Address 

j Admin Address 

Admin Address 

Admin Address NY 

Admin Address UNITED STATES 

Admin Email *******Gyahoo. com 

Admin Phone | | 

Admin Fax 


Tech Name YahooDomains TechContact 

Tech Address 701 First Ave. 

Tech Address 

Tech Address Sunnyvale 

Tech Address 94089 

Tech Address CA 

Tech Address UNITED STATES 

Tech Email **^********Qyahoo-inc . com-. 

Tech Phone +1.6198813096 

Tech Fax 

.< Name Server ynsl.yahoo.com 

Name Server yns2.yahoo.com 


b6 

b7C 


I 


i 




i 


r 


1 


.» 


1 of 1 


2/20/2007 9:08 AN 


WHOIS 

« 

* 




i 

! 

VV I 

i 


1 of 1 


62.1.242.135 

\ 


Location: Greece (City: Athens, AttikiJ 


% This i3 the RIPE Whois query server #1. 

.% The objects are in P.PSL format. 

* 

l Note: the default output of the RIPE Whois server 
ft is changed. Your tools may need to be adjusted. See 
$ http: //www. ripe. net/db/news/abuse-proposal-20050331 .html 
*% for more details. 

* 

l Rights restricted by copyright. 

ft See http://www.ripe.net/db/copyright.html 

ft Information related to *52.1.242.0 - 52.1.247.255' 


inetnura: 
netnarae: 
descr: 
country: 
admin-c: 
tech-c: 
.status: 
.mnt-by: 
jmnt-lower : 
Imnt-routes : 
’changed: 
: source: 


62.1.2-12.0 - 62.1.247.255 

FORTHN ET-NOC- ATH 

ADSL POOLS 

GR 

FP&5 

FN95 

ASSIGNED PA 

FORTHNETGR-MNT 

FORTHNETGR-MNT 

FORTHN ETGR-HNT 

♦*** Oforthnet.gr 20061214 

P.IPE 


person: 
address: 
i addro3S : 
address: 
address: 
address: 
phone: 
phone: 
fax-no: 
re-mail: 
abuse-mailbox: 
nic-hdl: 
mnt-by: 
changed: 
changed: 
source: 


FORTHnet PR 
FORTHnet SA 
Atthidon 4 
Kalithoa 
Athens 176 71 
Greece 

+30 2109559000 
+30 21 19559000 
+30 2109559333 
•**6 for thnet.gr 
* * -v * * 0 f 0 L - thne t . g r 
FP95 

FORTHNETGR-MNT 

orthnet.gr 20030505 
„*♦*,, + .** ort hnet.gr 2007011? 
RIPE 


•person: 

address: 

address: 

address: 

address: 

phone: 

phone: 

fax-no: 

fax-no : 

e-mail: 

e-mail: 

abuse-mailbox: 

.nic-hdl: 

jmnt-by: 

.changed: 

changed: 

^source: 


FORTHnet NOC 
FORTHnet SA 
58, Antigonis Str 
10442 ATHENS 
Greece 

+30 2119557000 
+30 2109559000 
+30. 2119557111 
+30 2107294896 
***Gforthnet .gr 
v******* ►♦Qforthnet.gr 
**** *Qforthnet.gr 
FN95 

FORTHNETGR-MNT 
**** 6forthnet.gr 20030411 
**,**♦*♦ **@forthnet.gr 20070119 
RIPE 


ft Information related to ' 62 . 1 . 0. 0/16AS1241 ' 


.route: 
descr: 
descr : 
origin: 
notify: 
remarks: 
mnt-by: 
mnt-by: 
changed: 
source: 


62.1.0.0/16 

FORTHNET-AS124 1-ADDRESS-BLOCK 
Athens, Greece 
AS 12 41 

+***+*6forthnet.gr 

send abuse reports to ** +* + Oforthnet . gr 

FORTHNETGR-MNT 

FORTHNETGR-MNT 

* + -*(3 forthnet.gr 20050909 

RIPE 


http://www:dnsstuff.com/tools/whois.ch?ip=62. 1 .242. 1 35 


i 


i 

4 

3 



•» 

J. 

i 


f 
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i 


WHOIS- 193.92.139.165 


http://www.dnsstuff.com/tools/whois.ch?ip=l 93 .92. 139. 1 65 


. > 


Location : Greece [City: Athens, Attiki) 


% This is the RIPE Whois query server #1. 

% The objects are in RPSL format. 

% 

X Note: the default output of the RIPE Whois server 
is changed. ¥our tools may need to be adjusted. See 
S http: //www. ripe. net/db/news/abuse-proposal-20050331 . html 
% for more details. 

% 

l Rights restricted by copyright. 

.fc See http://vrww.ripe.net/db/copyright.htjnl 

% Information related to '193.92.139.0 - 193.92.139.255’ 


inetnura: 
netnarae: 
descr: 
descr : 
descr: 
remarks : 
country: 
adrain-c: 
tech-c: 
status: 
'mnt-by: 
changed: 
source: • 


193.92.139.0 - 193.92.139.255 

FOPTHNET-NOC-ATH 

ADSL POOL 

Hellenic Telecommunications and Telematic Applications Company 

Greece 

INFRA- AW 

GR 

FP95 

FN95 

ASSIGNED PA 
FORTHNETGR-MNT 

*** **+**** @fort j 1net>gr 20060317 
RIPE 


person : 
address: 
address: 
address : 
address : 
address : 
phone: 
phone : 

'fax-no: 
e-mail : 

abuse-mailbox : 
nic-hdl : 
mnt-by: 
^changed: 
changed: 
source : 


FORTHnet PR 
FORTHnet SA 
Atthidon 4 
Kalithea 
Athens 17 6 71 
Greece 

+30 2109559000 
•1-30 2119559000 
+30 2109559333 
* *0 fcorthnct.gr 
***** 0forthnet.gr 
PP95 

FORTHNETGR-MNT 

******** ** Qforthnet.gr 20030505 
******* •‘'Oforthnet.gr 20070119 
P.IPE 


person: 
address: 
'address: 
;address: 
■address: 
phone: 
phone: 
fax-no : 
fax-no : 
e-mail: 
e-mail : 

'abuse-mailbox: 

nic-hdl: 

mnt-by: 

changed: 

changed: 

source: 


FORTHnet N0C 
FORTHnet 3 A 
50, Antigonis Str 
104 '12 ATHENS 
Greece 

+30 2119557000 

+30 2109559000 

+30 2119557111 

+30 2107294896 

*++ Qforthnet.gr 

♦ w ** ^* , ***»6forthnet .gr 

** *** 6forthnet.gr 

FN95 

FORTHNETGR-MNT 
**** Qforthnet.gr 20030411 
*- 1 *******0fcrthnet.gr 20070119 
RIPE 


Information related to ' 193. 92. 128. 0/1 8AS 1241* 


l 


>* 


a 

| 


f 


i 


route: 

descr: 

origin: 

;mnt-by: 

ichanged 

source: 


193.92.128.0/18 
FORTHNET-CUSTOHERS 
AS 12 41 

FORTHNETGR-MNT 

** * ** ** *0forthnec . gr 1 9970612 
RIPE 
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WHOIS- 87.203.190.6 


http://www.dnsstuff.com/tools/whois.ch?ip=87.203.190.6 


> v 

Location : Greece (City: Athens, AttikiJ 


* This is the RIPE Whois query server #1 . 

1% The objects are in P.PSL format. 

i% 

l Note: the default output of the RIPE Whois server 
% is changed. Your tools may need to be adjusted. See 
SS http: //www. ripe. net/db/news/abuse-pcoposal-20050331 . html 
for more details. 

!* 

l Rights restricted by copyright. 

* See http: //wv:w. ripe.net/db/copyright.html 

% Information related to '87.203.32.0 - 87.203.255.255' 


inetnum: 
netname: 
descr: 
descr : 
country: 
.admin-c: 
;tech-c: 
:tech-c: 
trev-srv: 
;rev-srv: 
‘status: 
■remarks: 
remarks: 
.remarks: 
remarks: 

; remarks: 
mnt-by : 
n\nt-domains 
changed: 
source: 

person: 
address : 
.address: 
address: 
address : 
phone: 
•fax-no: 
e-mail : 
<nic-hdl: 
changed: 
source: 

i 

•person: 
[address: 
-address: 
address: 
address: 
phone: 
fax-no: 
e-mail: 
,nic-hdl: 
'notify: 
jmnt-by: 
i changed: 
[source: 

person: 
^address: 
address : 
address: 
address : 
address : 
.phone: 

: fax-no: 
e-mail: 
nic-hdl: 
notify: 
ront-by : 
changed: 
source: 


87.203.32.0 - 87.203.255.255 
OTENET 

Multiprotocol Service Provider to other ISP's and End Users 
located in Greece and having nodes in 63 cities 
GR 

SS7793-RIPE 
AV323-RIPE 
KK656-RI PE 
nsl.otenet.gr 
ns 2 .otenet.gr 
ASSIGNED PA 

+- - — — -— — — h 

I General enquiries: *' 4 ’@otenet . gr I 
(Abuse 0 Spam: *** **@otenet. yr I 

| DNS * FIPS: *** v******eotenet.gr I 

+ + 

OTENET-GR-MNT 
OTBHET-GR-MNT 
* 4 ***’* 0 ofcenet . gr 20060816 
P.IPE 


-30-210-6151900 
* > 6 otenot.gr 

SS7793-RIPE 

Gotcnet.gr 20060619 

RIPE 


+30-210-6151900 
4 * v**^^*gotenet . gr 
AV323-RIPE 

4 * * 3 otenet.gr 
OTEMET-GR-HNT 

*4 **4 * •* *Q 0 tenet . gr 20031216 
RIPE 


+30-210-6151900 

** *** *Gotenet.gr 

KK656-RIPE 

*"• **4 *@otenet . gr 

OTEHET - GR-MNT 

♦ **-*^0otenet.gE 20040205 

RIPS 


5 Information related to ' 87 . 203 . 0. 0/16AS6799* 


route: 
deocr : 
origin: 
imnt-by: 
changed: 
source: 


87.203.0.0/16 

OTEHET S.A 

AS 67 99 

OT BN ET-GR-MNT 

v * '0otenet.gr 20070216 
RIPE 


b6 

b7C 


i 
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WHOIS- 212.54.199.192 


http://www.dnsstuff.coin/tools/whois.ch?ip=2 12.54. 1 99. 1 92 


1 r .# 

Location ; Greece (City: Athens, At tiki) 


$ This is the RIPE Whois query server Hi. 

% The objects ere in RPSL format. 

5 

% Note: the default output of the RIPE Whois server 
is changed. Your tools may need to be adjusted. See 
5 http: //www. ripe. net/db/news /abuse-proposal-20050331 .html 
•% for more details. 

% 

Rights restricted by copyright, 
fc See http://www.ripe.net/db/copyright.html 

% Information related to ’212.54.199.0 - 212.54.199.255' 


inetnum: 

netname: 

descr; 

: descr : 
descr: 
remarks: 
;country : 
;admin-c: 
tech-c: 
status: 
mnt-by : 
ichanged: 
source : 


212.54.199.0 - 212.54.199.255 
FOP.THN ET-NOC-ATH 
ADSL POOLS 

Hellenic Telecommunications and Telematic Applications Company 

Greece 

INFRA- AW 

GR 

FP95 

FHS5 

ASSIGNED PA 
FORTHNETGR-MNT 

+ » * ♦* *** «-* @f orthnet . gr 20060213 
RIPE 


person: 

•address: 

address: 

address: 

address: 

address: 

phone: 

: phone: 

| fax— no: 
e-mail : 

abuse-mailbox: 
nic-hdl: 
mnt-by: 
•changed: 
changed : 
source: 

# 


FORTHnet PR 
FORTHnet SA 
Atthidon 4 
Kalithea 
Athens 176 71 
Greece 

+30 2109559000 
+30 2119559000 
+30 2109559333 
*♦3 for thnet.gr 
+•* * ++ 0forthnet.gr 
FF95 

FORTHNETGP.-MHT 

>+++++<+ ^ 0forthnet.gr 20030505 
****♦,*♦*+< 1 forthnet.gr 20070119 
RIPE 


Iperson: 
’address : 
•address: 
address: 
address: 

;phone: 

.phone: 

! fax-no: 
•fax-no: 
e-mail: 
e-mail : 

.abuse-mailbox: 
jnic-hdl: 
imnt-by: 
changed: 
changed: 
source : 


FORTHnet NOC 
FORTHnet 3 A 
58, Antigonis Str 
10442 ATHENS 
Greece 

+30 2119557000 
+30 2109559000 
+30 2119557111 
+30 2107294896 
♦**6forthnet .gr 

♦*** ******gf or thnet.gr 

*** *■* 0forthnet.gr 
FN95 

FORTHNETGR-MNT 

**** 0forthnet.gr 20030411 

+*+«•+£ forthnet.gr 20070119 

RIPE 


1 Information related to • 212 . 54 . 192. 0/19AS1241 • 


route: 
descr : 
origin: 
mnt-by: 
•changed: 
source: 


212.54.192.0/19 
FORTHNET 
AS 12 41 

FORTHNETGR-MNT 

♦*+*♦+*♦ **0 hel i asnet .gr 20051031 
RIPE 


i 

t 

« 

t 

I 


[The following lines added by www.dnsstuff.com per requirement by RIPE) 

This service is subject to the terms and conditions stated in the RIPE NCC Database Copyright Notice .. 
Contact dnsstuf f .com' s ’info20' address to report problems regarding the functionality of the service. 
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File Number _ 

Field Office Acquiring Evidence , 
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* (Name of CoTim^ulor/hlmicwte) 


(Ntmc of Contribulor/Inlavic 
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(Address) 
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By 




(CilYtnd Sttlc) , 


To Be Returned □ Yes 

Receipt Given □ Yes ’ 

Grand Jury Material - Disseminate Only Pursuant to Rule 6 (e) 


JZ^No. 
(ZJ No 


Federal Rules of Criminal Procedure 
m Yes 

Federal Taxpayer information (FTI) 
□ *Yes 


□ No- 

jxno 
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. DISTRICT OF — 
NEVADA 


SUBPOENA TO TESTIFY 
BEFORE GRAND JURY 


-0 4-4^219 


SUBPOENA FOR: / 

□ PERSON 0 DOCUMENT(S) OR 08 J£CT(S) 


YOU ARE HERE8Y COMMANDED to appear and testify before the Grand Jury of the United States OistrfcC Court at 
the place, date, and dme specified below. 


iC 

V 


place ’ ' 4 

LLOYD D. GEORGE UNITED STATES COURTHOUSE { 
333 Las Vegas Boulevard South, 5th Floor 

t -rc» \ /V>r-TOP Mni/o/io ICH HI 

COURTROOM 

FEB 0/9 20Q?~ 



■ — ' w t ... 

YOU ARE ALSO COMMANDED to bring with you the following documents) or object(s):* 


b3 



-rr^ Abt tNLLUSk A UUP ? OF THIS SUBPOENA WITH THE DOCUMENTS . 

IN LIEU OF PERSONAL APPEARANCE, THESE RECORDS MAY BE MAILED TO THE ASSISTANT 
UNITED STATES ATTORNEY.i lN CARE OF TERRIE MURRAY . AT THE ADDRESS REFLECTED 
BELOW. IF ORIGINAL DOCUMENTS PLEASE SEND VIA REGISTERED MAIL. 

O soo DdJrthntfinforfMOah on reverse 


This subpoena shall remain in effect until you are granted leave to depart by the court or by an officer acting on. 
behalf of the court. 


CLEftK 


||u 



■O'Y'kj? 


This 
of the 


anon 


** <** w H -; 

DANIEL G. BOGDEN 
United States Attorney 


1 

I GRAND JURY 

\ .^exhibit 

r 


dk J 

1 



GATE 


January 19, 2007 

KPS/AK/FB!:tm 

(06R1708) 


HM4& Aooness phONE NUMeen op assistant ms . attchwey 

KURT P. SCHULKE, Assistant U.S. Attorney 
Chief] Criminal Division 

333’Las Vegas Blvd., S., Suite 5000 
Las Vegas, Nevada 89101 
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